Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/FzCE_2CmXVI87QCBjmMqmhPqvI4.roa
File: FzCE_2CmXVI87QCBjmMqmhPqvI4.roa (raw, json)
Hash identifier: xnBYv3l8pbmO/yFa4pavqkCSVOI2MUIexKvv0cmsLEo=
Subject key identifier: 17:30:84:FF:60:A6:5D:52:3C:ED:00:81:8E:63:2A:9A:13:EA:BC:8E
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 019424B38F0B01CB1BB1CD092E94C2E4C568
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/FzCE_2CmXVI87QCBjmMqmhPqvI4.roa
Signing time: Thu 02 Jan 2025 01:48:54 +0000
ROA not before: Thu 02 Jan 2025 01:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201281
IP address blocks: 45.154.62.0/24 maxlen: 24
2a0f:b100:200::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8f:0b:01:cb:1b:b1:cd:09:2e:94:c2:e4:c5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=173084ff60a65d523ced00818e632a9a13eabc8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:40:19:8a:b2:93:94:e7:53:4a:66:76:93:
49:04:e7:b5:32:4d:5a:be:92:aa:21:cb:1c:26:e6:
26:48:06:ee:53:56:aa:b9:6d:5b:f6:69:51:bd:8b:
22:1b:64:7f:ca:95:5c:ae:e2:9b:46:0e:a7:ae:df:
98:38:a7:25:b9:c1:02:02:0a:cb:75:65:14:69:f9:
4a:a2:60:72:ce:76:69:f3:a0:a9:fb:92:8f:b2:a5:
56:fc:82:49:e7:49:78:23:50:aa:36:05:12:e8:43:
1f:ab:ad:89:f3:04:76:4b:5c:7c:81:f5:6c:95:4d:
4b:c6:67:19:18:dd:f4:79:e3:6d:ed:c3:d4:1d:25:
1f:b4:5d:0e:8c:a6:73:c3:3c:4c:4a:73:9e:fb:ae:
b6:83:53:6f:81:22:28:67:4c:8e:1e:37:d4:d6:05:
e0:51:24:5b:1b:22:1c:f9:93:23:0f:63:3f:f7:2c:
b0:3c:40:50:4a:42:36:5e:e2:de:1b:ed:5f:ab:17:
50:a0:b4:74:d7:48:6b:9d:15:06:c2:96:69:5e:f0:
15:d7:4e:e8:cc:70:f2:bf:0b:2a:ce:ff:3b:09:0c:
e5:ae:65:d8:43:2c:bf:98:33:fd:54:57:6b:bd:bd:
a9:2b:65:cd:9f:14:d9:4d:47:f8:0a:bf:06:af:69:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:30:84:FF:60:A6:5D:52:3C:ED:00:81:8E:63:2A:9A:13:EA:BC:8E
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/FzCE_2CmXVI87QCBjmMqmhPqvI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.62.0/24
IPv6:
2a0f:b100:200::/40
Signature Algorithm: sha256WithRSAEncryption
68:6e:df:29:6b:65:66:4d:75:4b:cc:38:cb:c8:c8:4c:56:9e:
b0:72:76:9e:73:94:60:ea:e0:3c:1a:47:97:48:d2:6f:7a:f7:
0d:a2:5a:2a:3d:19:9e:88:83:6e:16:30:57:09:3b:3e:5c:98:
a2:19:7b:ce:af:12:c0:cf:a4:e1:96:f5:44:77:31:b1:0f:d1:
77:c4:5e:e8:b4:90:96:e7:90:35:5e:37:26:24:b6:b4:6f:ba:
32:44:52:5f:02:ed:6f:b0:df:ea:67:3f:03:19:50:e6:bd:a1:
2a:03:72:3a:6f:0e:49:75:12:65:17:75:15:aa:1e:64:12:d9:
58:1a:5a:3d:6c:49:95:5f:97:cf:af:fc:24:97:9d:e3:52:0b:
1f:78:46:9d:7b:88:ab:75:22:61:9f:bf:26:c0:be:30:38:3b:
87:29:19:8b:16:a4:1e:01:1d:f9:21:6f:65:f3:28:0f:aa:62:
7f:ed:91:33:9e:61:63:b3:d6:36:f7:be:eb:23:d6:4a:f7:c1:
5d:dc:f7:b0:62:d5:5a:f0:c5:ce:ec:31:e4:93:66:50:5d:db:
7c:1b:4f:05:41:6f:ef:17:94:29:08:a7:f1:b7:b9:ec:36:06:
83:55:43:7e:24:35:1e:5a:ba:71:5c:c0:db:a8:79:ae:be:f5:
28:e4:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:43 2025 by rpki-client